So we went from a single-factor solution (magstripe) that was only clonable hands-on, to two-factor (chip&pin) and even multi-factor (mobile payments) solutions

So we went from a single-factor solution (magstripe) that was only clonable hands-on, to two-factor (chip&pin) and even multi-factor (mobile payments) solutions that were near-impossible to clone even with significant hands-on time and e2e cryptographically verifiable and now to...a single factor that can be cloned by line of sight (or even remotely) and has no cryptographic verification... And don't try tell me that the facial recognition can't be fooled. Every biometric ID system I know of was broken eventually and keep in mind that these systems might sometimes be unattended or deployed by untrustworthy people so the attack surface is even greater. Can't wait until we go back to "tell the cashier your name and they phone the bank at the end of the day"......